Everyone in my family uses weak as shit passwords and they don't use the most rudimentary means of hiding their identity.

I've had family members had their checking accounts hijacked by skimmers, my father got called from microsoft b/c he "has a virus on his computer" and he let them remote in (he now has ubuntu). Family members got nailed on AdultFriendFinder and AshleyMadison - which frankly i think it was sad and tragic - it was some bored, late night browsing, thinking about something he shouldn't have been thinking about with no intent or even means to act upon it after his wife stopped having sex with him for 2 years because she was insecure about her own fatness.

I tell my siblings, my wife, my mom - use a password manager. I even offer to manage backups of these things.

I had arguements with my wife about 2-factor auth being turned on for our shared Amazon accounts, our individual emails and bank account access b/c "it's annoying".

People have shifted their entire lives online -finances, dirty secrets, political affiliations and activism, mean shit they say about bosses or family members in help forums, dirty shit they look at when they think no one is looking, and none of them can be fucked to protect themselves.

All this time people spend staring down at their phones or attached to a keyboard and getting people to utilize some best practices is like pulling teeth.

I, honestly, think Google, Apple, Microsoft, Amazon and other major players need to force their hand and make them. Same with ever banking institution with online access. And if you lose your data, maybe you'll learn to keep up with shit next time.